[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-3J35rA66KEbP9pqVm0E_tLYm7zPUq6bKmImkyNWaIw":3,"g5a-risk:CVE-2021-32845":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":26,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":46,"references":47,"referencesCount":60,"weaknesses":61,"weaknessesCount":76,"isActivelyExploited":77,"cisaInfo":26,"otxData":26,"relatedBlogPosts":78,"seoMetadata":79,"configurations":104,"relatedVendorCves":113,"notableEvents":114},"CVE-2021-32845","What is CVE-2021-32845?","HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of `qnotify` at `pci_vtrnd_notify` fails to check the return value of `vq_getchain`. This leads to `struct iovec iov;` being uninitialized and used to read memory in `len = (int) read(sc->vrsc_fd, iov.iov_base, iov.iov_len);` when an attacker is able to make `vq_getchain` fail. This issue may lead to a guest crashing the host causing a denial of service and, under certain circumstance, memory corruption. This issue is fixed in commit 41272a980197917df8e58ff90642d14dec8fe948.","HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of `qnotify` ...","2023-02-17T23:15:11.963","2023-06-26T17:47:09.283",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":35,"ImpactScore":36},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":34,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",7.7,2.5,5.2,0.0025,[37,37,37,37,37,37,37],"High",[41],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"mobyproject","hyperkit","*","cpe:2.3:a:mobyproject:hyperkit:*:*:*:*:*:*:*:*",1,[48,53,56],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fgithub.com\u002Fmoby\u002Fhyperkit\u002Fcommit\u002F41272a980197917df8e58ff90642d14dec8fe948","GitHub",[52],"Patch",{"url":54,"source":50,"tags":55},"https:\u002F\u002Fgithub.com\u002Fmoby\u002Fhyperkit\u002Fpull\u002F313",[52],{"url":57,"source":50,"tags":58},"https:\u002F\u002Fsecuritylab.github.com\u002Fadvisories\u002FGHSL-2021-054_057-moby-hyperkit\u002F",[59],"Third Party Advisory",3,[62,70],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-252","Unchecked Return Value","The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.","Two common programmer assumptions are \"this function call can never fail\" and \"it doesn't matter if this function call fails\". If an attacker can force the function to fail or otherwise return a value that is not expected, then the subsequent program logic could lead to a vulnerability, because the product is not in a state that the programmer assumes. For example, if the program calls a function to drop privileges but does not check the return code to ensure that privileges were successfully dropped, then the program will continue to operate with the higher privileges.","Draft","Base","Simple",{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":68,"structure":69},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.","Incomplete",2,false,[],{"title":80,"metaDescription":81,"keywords":82,"canonicalUrl":83,"structuredData":84},"What is CVE-2021-32845? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-32845, a high severity cyber security vulnerability from 2023. HyperKit is a toolkit for embedding hypervisor capabilities...","CVE-2021-32845, CVE-2021-32845 vulnerability, CVE-2021-32845 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, mobyproject security, hyperkit vulnerability","\u002Fwhat-is\u002Fcve-2021-32845",{"@context":85,"@type":86,"headline":80,"description":81,"datePublished":10,"dateModified":11,"author":87,"publisher":91,"about":95,"mainEntityOfPage":99,"articleSection":102,"keywords":103},"https:\u002F\u002Fschema.org","TechArticle",{"@type":88,"name":89,"url":90},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":88,"name":89,"url":90,"logo":92},{"@type":93,"url":94},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":96,"name":6,"description":97,"additionalType":98},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":100,"@id":101},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-32845","Cybersecurity","CVE-2021-32845, CVE-2021-32845 vulnerability, CVE-2021-32845 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[105],{"Operator":26,"Negate":26,"Nodes":106},[107],{"Operator":108,"Negate":26,"CPEMatch":109},"OR",[110],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":112},"0AE32831-24E2-44FD-939C-E6F799A5D632","0.20210107",[],[],{"lastModified":11,"cacheTime":116,"version":117},1792232834983,"2.0",{"score":119,"band":120,"action":121,"scoredAt":122},46,"Medium","Plan remediation","2026-10-16T06:57:12.142948+00:00"]